FINRA's 2026 oversight report accelerates focus on AI, cyber threats and market integrity

The Financial Industry Regulatory Authority released its 2026 Regulatory Oversight Report earlier than in past years, a move FINRA says responds to member-firm feedback about the document’s value for annual compliance planning and to support a “FINRA Forward” initiative intended to empower firm compliance. According to the original report, the publication, normally issued in January, was advanced to give firms timely access to FINRA’s supervisory observations and effective practices. Greg Ruppert, executive vice president and chief regulatory operations officer at FINRA, is quoted in the release saying: “Our 2026 FINRA Regulatory Oversight Report captures important findings and translates them into practical guidance our member firms can act on immediately.” He added that the report is “essential because member firm compliance protects investors and safeguards the integrity of our markets.”

The report reiterates FINRA’s role as the self‑regulatory body responsible for examining members that act as municipal securities dealers or municipal advisors and for enforcing Municipal Securities Rulemaking Board rules. It highlights municipal‑market issues alongside broader threats and technological trends regulators see across capital markets.

Customer order handling and best execution
A substantive portion of the municipal‑securities material revisits customer order handling and best execution. The report reminds firms that FINRA Rule 5310 requires a firm to “use reasonable diligence to ascertain the best market for the subject security and buy or sell in such market so that the resultant price to the customer is as favorable as possible under prevailing market conditions.” It notes similar obligations under MSRB Rule G‑18 for municipal transactions.

FINRA’s examinations found recurring shortcomings. Firms sometimes failed to compare execution quality from their existing order‑routing arrangements with alternatives, including competing markets and alternative trading systems. The report also cited failures to perform “regular and rigorous” reviews or to consider execution quality factors specified in FINRA Rule 5310, Supplementary Material .09, when such reviews were undertaken. According to the original report, these lapses leave Firms vulnerable to inferior execution quality and weaker disclosure to clients about order routing practices.

Fixed income pricing and the “prevailing market price”
On fixed income, the report underscores that fair‑pricing obligations apply across securities: FINRA Rule 2121 and MSRB Rule G‑30 require dealers acting in a principal capacity to mark up or mark down transactions from the prevailing market price (PMP). The report explains that the PMP “is presumptively established by referring to the dealer’s contemporaneous cost as incurred or proceeds as obtained” and sets out the waterfall analysis firms should follow when contemporaneous cost is not dispositive.

Examination findings, the report says, include incorrect determinations of the PMP. Examples include firms bypassing the contemporaneous cost presumption and waterfall rules in favour of limited quotation samples or relying on third‑party pricing software without following up on trades flagged for supervisory review. According to the original report, such practices can result in materially incorrect mark‑ups or mark‑downs and weak supervisory oversight.

Generative AI, cyber threats and evolving operational risks
The 2026 report introduces a new section on generative artificial intelligence. According to the FINRA analysis, GenAI presents opportunities for efficiency but also raises established supervisory obligations covering supervision, communications, recordkeeping and fair dealing. The report outlines emerging trends and effective practices for firms integrating GenAI into client‑facing or internal processes and warns that promised benefits must be balanced against risks to compliance and investor protection.

Cybersecurity remains a central concern. Drawing on the prior year’s observations, FINRA reports an expanding variety of cyber‑enabled threats that firms should address, ransomware, new‑account fraud, insider threats, account takeovers, data breaches, imposter sites and so‑called “quishing” attacks. The organisation emphasises strengthening controls across third‑party dependencies, access management, and incident response plans.

Industry observers say the convergence of sophisticated cyber‑attacks and AI‑enabled financial crime is already complicating detection and prevention. A recent financial‑crime analysis from private sector investigators warned that bad actors are using AI to create convincing impersonations and fake accounts that can defeat traditional defences; regulators and firms must therefore adapt controls and monitoring to a rapidly changing threat landscape.

Broader market integrity topics and practical resources
Beyond municipal‑market and operational issues, the report touches on manipulative trading in small‑cap equities and third‑party vendor risk, areas FINRA has emphasised in recent oversight work. The organisation has made the report available on its website and, according to a FINRA weekly notice, accompanied the release with a podcast discussing key findings and practical takeaways for compliance teams.

The report is presented as a resource for member firms to align annual compliance planning with the patterns and pitfalls identified by FINRA’s examination and enforcement programmes. According to the original report, firms that adopt the “effective practices” described, rigorous execution reviews, documented pricing methodologies and closer oversight of AI tools and third‑party providers, can strengthen resiliency and better protect investors.

Regulatory distance and market impact
While FINRA frames the report as guidance to help firms improve compliance, its findings also signal priorities for future examinations and potential enforcement attention. Industry data and prior FINRA reports show that failures in execution oversight, pricing practices and vendor supervision are persistent sources of regulatory action. Firms taking the report’s observations seriously are likely to face enhanced expectations from examiners on documentation, supervisory escalation and remediation where practices fall short.

The 2026 Regulatory Oversight Report therefore serves both as a practical checklist for compliance officers and a preview of supervisory emphasis: FINRA has advanced the timing of publication in response to demand from member firms, but the substance reiterates familiar themes, order execution transparency, defensible pricing, cybersecurity maturity and careful management of emerging technologies, while adding the specific compliance contours firms must now address as GenAI and sophisticated cyber threats reshape market‑facing operations.